Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #6  
Old 01-23-2018, 14:47
MistHill MistHill is offline
Family
 
Join Date: Dec 2012
Posts: 31
Rept. Given: 12
Rept. Rcvd 42 Times in 13 Posts
Thanks Given: 26
Thanks Rcvd at 135 Times in 28 Posts
MistHill Reputation: 42
Bypass the WinLicense 2.4.6.0 HWiD Check

Xentry.exe(VeDoc calculator) is protected by WinLicense 2.4.6.0.
It can not run in Windows XP because it imports APIs from dwmapi.dll.

I played in Windows 7 with your valid license file regkey.dat:
  1. Set a hardware execution breakpoint at 0147CB7B(where ModuleBase is 00400000);
  2. F9, run. waiting for user32.MessageBoxEx(NULL, "This application has been registered to\r\nSkud1 - Private 2", "WinLicense", MB_ICONINFORMATION, 0);
  3. Click Ok in MessageBox, then it should land on the BP;
  4. At here, modify DWORD [0130A21D]=7CBDC03A;
  5. Clear the BP, F9. You are free to go!

It's so simple, so easy to bypass the HWiD Check! Sad for Oreans.

For more technical details, please refer to my post years ago at tuts4you Themida 2.2.6.0, in which attached a WinLicense 2.2.6.0 example.
Reply With Quote
The Following User Gave Reputation+1 to MistHill For This Useful Post:
Mahmoudnia (01-23-2018)
The Following 6 Users Say Thank You to MistHill For This Useful Post:
Mahmoudnia (01-23-2018), Newbie_Cracker (01-30-2018), niculaita (01-24-2018), NoneForce (01-24-2018), ontryit (01-24-2018), tonyweb (02-04-2018)
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 06:34.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )